From: sebastian <rei...@fh...> - 2004-05-10 11:39:38
|
hi, after a weekend trying to get snort_inline to work (finally it works now :) i stumbled across a problem which took me a lot of time to figure out because of a not existent error message, maybe in the next version??? here it comes: i used snort without the database plugin and without the -i <iface> parameter which worked well. after that i tried to use the database output plugin and it segfaults without giving me any reason. as the problem only occurs if the database plugin is enabled, i think the problem resides in src/output-plugins/spo_database.c in line 350. if i omit the -i parameter PRINT_INTERFACE(pv.interface) returns NULL. sth. like that would be nice: if (PRINT_INTERFACE(pv.interface) == NULL) { fprintf(stderr, "ERROR: please specify parameter -i <iface>\n"); exit(1); } sebastian |